Insecure Permissions in Ruckus Wireless Unleashed Devices Allows Credential Overwrite

CVE-2020-13915

Summary

Ruckus Wireless Unleashed devices have a vulnerability in the emfd/libemf component, allowing an unauthenticated remote attacker to exploit insecure permissions. By sending a crafted HTTP request, an attacker can overwrite administrative credentials, potentially gaining unauthorized control over affected devices. This vulnerability spans multiple models, making it critical for users of Ruckus Unleashed to review security measures to prevent exploitation.

References